Cisco Systems ASA 5500 manual In the Destination area, 6-21

Chapter 6 Scenario: DMZ Configuration

Configuring the Security Appliance for a DMZ Deployment

Alternatively, if the address of the source host or network is preconfigured, choose the source IP address from the IP Address drop-down list.

c.Enter the netmask for the source IP address or select one from the Netmask drop-down list.

Step 4 In the Destination area:

a.In the IP address field, enter the public IP address of the destination host or network, such as a web server. (In this scenario, the public IP address of the DMZ web server is 209.165.200.226.)

Step 5 In the Protocol and Service area, specify the type of traffic that you want to permit through the adaptive security appliance.

a.From the Protocol drop-down list, choose tcp.

b.In the Source Port area, click the Service radio button, choose “=” (equal to) from the Service drop-down list, and then choose Any from the next drop-down list.

c.In the Destination Port area, click the Service radio button, choose “=” (equal to) from the Service drop-down list, and then choose HTTP/WWW from the next drop-down list.

	Cisco ASA 5500 Series Adaptive Security Appliance Getting Started Guide
78-17611-01		6-21